Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
bun	@measured/puck
bun	framer-motion

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• fix(deps): update minor updates (@hookform/resolvers, @milkdown/crepe, @milkdown/kit, @milkdown/react, @playwright/test, @scure/base, @sentry/tanstackstart-react, @storybook/addon-a11y, @storybook/addon-docs, @storybook/addon-themes, @storybook/addon-vitest, @storybook/react, @storybook/react-vite, @tailwindcss/oxide-linux-arm64-gnu, @tailwindcss/oxide-linux-x64-gnu, @tailwindcss/postcss, @tanstack/react-query, @tanstack/react-router, @tanstack/router-plugin, @xmldom/xmldom, alpine, date-fns, docker/dockerfile, framer-motion, i18next, ip-address, jsdom, katex, knip, kysely, libphonenumber-js, lucide-react, mssql, mysql2, oxfmt, oxlint, oxlint-tsgolint, paradedb/paradedb, pdfjs-dist, pg, react-hook-form, recharts, shiki, storybook, tailwind-merge, tailwindcss, yaml, zod)
• chore(deps): update dependency @types/jsdom to v28
• chore(deps): update dependency @types/node to v25
• chore(deps): update dependency typescript to v6
• fix(deps): update dependency shiki to v4
• 🔐 Create all awaiting schedule PRs at once 🔐

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• fix(deps): replace dependency framer-motion with motion
• chore(deps): pin dependencies (actions/cache, actions/checkout, actions/download-artifact, actions/upload-artifact, astral-sh/setup-uv, bun, docker/build-push-action, docker/login-action, docker/setup-buildx-action, dorny/paths-filter, felixmosh/turborepo-gh-artifacts, github/codeql-action, oven-sh/setup-bun)
• chore(deps): pin node.js
• fix(deps): update better-auth to v1.6.24 (@better-auth/api-key, @better-auth/passkey, better-auth)
• fix(deps): update patch updates (@casl/ability, @commitlint/cli, @commitlint/config-conventional, @iconify-json/lucide, @iconify/react, @inquirer/prompts, @kubernetes/client-node, @measured/puck, @microlink/react-json-view, @novnc/novnc, @radix-ui/react-checkbox, @radix-ui/react-dialog, @radix-ui/react-dropdown-menu, @radix-ui/react-label, @radix-ui/react-popover, @radix-ui/react-separator, @radix-ui/react-slot, @radix-ui/react-tabs, @radix-ui/react-toast, @radix-ui/react-tooltip, @radix-ui/react-visually-hidden, @rollup/rollup-linux-arm64-gnu, @rollup/rollup-linux-x64-gnu, @swc/core-linux-arm64-gnu, @swc/core-linux-x64-gnu, @types/bun, @types/node, @types/pngjs, @types/react, @types/ws, @vitejs/plugin-react, @vitest/browser-playwright, @vitest/coverage-v8, aws4fetch, commitizen, dayjs, defu, diff, happy-dom, jose, maximhq/bifrost, oven/bun, parse5, plop, pngjs, postcss, postgres, react, react-dom, react-i18next, react-is, swagger-ui-react, turbo, turndown, typescript, uuid, vite, vite-plugin-pwa, vitest)
• chore(deps): update dependency @types/mssql to v12
• chore(deps): update docker docker tag to v28
• chore(deps): update github actions (major) (actions/cache, actions/checkout, astral-sh/setup-uv, docker/login-action)
• fix(deps): update dependency undici to v8
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• chore(deps): update commitlint monorepo to v21 (@commitlint/cli, @commitlint/config-conventional)
• chore(deps): update dependency @testing-library/jest-dom to v7
• chore(deps): update dependency magic-string to v1
• chore(deps): update dependency oxlint-tsgolint to v7
• chore(deps): update maximhq/bifrost docker tag to v2
• fix(deps): update dependency @casl/ability to v7
• fix(deps): update dependency commander to v15
• fix(deps): update dependency pdfjs-dist to v6
• fix(deps): update dependency react-day-picker to v10
• fix(deps): update dependency typescript to v7

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update dependency @vitest/browser to v4.1.10 [security]
• chore(deps): update dependency brace-expansion to v5.0.7 [security]
• chore(deps): update dependency fast-uri to v3.1.4 [security]
• fix(deps): update dependency dompurify to v3.4.12 [security]
• fix(deps): update dependency hono to v4.12.27 [security]
• chore(deps): update dependency axios to v1.18.0 [security]
• chore(deps): update dependency sharp to v0.35.0 [security]
• chore(deps): update dependency immutable to v4 [security]
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): update dependency @noble/curves to v2

Detected Dependencies

bun (24)

builtin-configs/skills/visual-aspect-analyzer/package.json (5)

• pngjs ^7.0.0 → [Updates: 7.0.0]
• @types/bun 1.3.11 → [Updates: 1.3.14]
• @types/pngjs ^6.0.5 → [Updates: 6.0.5]
• happy-dom ^20.10.6 → [Updates: 20.11.1]
• typescript 6.0.2 → [Updates: 6.0.3, 7.0.2]

package.json (75)

• @hookform/resolvers 5.2.2 → [Updates: 5.4.0]
• @radix-ui/react-checkbox 1.3.3 → [Updates: 1.3.5]
• @radix-ui/react-label 2.1.8 → [Updates: 2.1.10]
• @radix-ui/react-tooltip 1.2.8 → [Updates: 1.2.10]
• @tailwindcss/postcss 4.2.2 → [Updates: 4.3.0]
• @tanstack/react-router 1.168.10 → [Updates: 1.170.7]
• i18next 26.0.4 → [Updates: 26.2.0]
• lucide-react 1.8.0 → [Updates: 1.16.0]
• react 19.2.5 → [Updates: 19.2.7]
• react-dom 19.2.5 → [Updates: 19.2.7]
• react-hook-form 7.72.1 → [Updates: 7.76.1]
• tailwindcss 4.2.2 → [Updates: 4.3.0]
• zod 4.3.6 → [Updates: 4.4.3]
• @commitlint/cli 20.5.0 → [Updates: 20.5.3, 21.2.1]
• @commitlint/config-conventional 20.5.0 → [Updates: 20.5.3, 21.2.0]
• @iconify-json/logos 1.2.11
• @iconify/utils 3.1.3 → [Updates: 3.1.4]
• @storybook/addon-a11y 10.3.5 → [Updates: 10.4.1]
• @storybook/addon-docs 10.3.5 → [Updates: 10.4.1]
• @storybook/addon-themes 10.3.5 → [Updates: 10.4.1]
• @storybook/addon-vitest 10.3.5 → [Updates: 10.4.1]
• @storybook/react 10.3.5 → [Updates: 10.4.1]
• @storybook/react-vite 10.3.5 → [Updates: 10.4.1]
• @tanstack/router-plugin 1.167.12 → [Updates: 1.168.10]
• @testing-library/dom 10.4.1
• @testing-library/jest-dom 6.9.1 → [Updates: 7.0.0]
• @testing-library/react 16.3.2
• @testing-library/user-event 14.6.1
• @types/bun 1.3.11 → [Updates: 1.3.14]
• @types/react 19.2.14 → [Updates: 19.2.17]
• @types/react-dom 19.2.3
• @vitejs/plugin-react 6.0.1 → [Updates: 6.0.2]
• @vitest/browser 4.1.8 → [Updates: 4.1.10]
• @vitest/browser-playwright 4.1.8 → [Updates: 4.1.9]
• @vitest/coverage-v8 4.1.8 → [Updates: 4.1.9]
• commitizen 4.3.1 → [Updates: 4.3.2]
• cz-conventional-changelog 3.3.0
• husky 9.1.7
• jsdom 29.0.2 → [Updates: 29.1.1]
• knip 6.3.1 → [Updates: 6.14.2]
• oxfmt 0.44.0 → [Updates: 0.51.0]
• oxlint 1.59.0 → [Updates: 1.66.0]
• oxlint-tsgolint 0.20.0 → [Updates: 0.23.0, 7.0.2001]
• plop 4.0.1 → [Updates: 4.0.5]
• postcss 8.5.10 → [Updates: 8.5.15]
• postcss-load-config 6.0.1
• storybook 10.3.5 → [Updates: 10.4.1]
• turbo 2.9.14 → [Updates: 2.9.18]
• typescript 6.0.2 → [Updates: 6.0.3, 7.0.2]
• vite 8.0.16 → [Updates: 8.1.5]
• vitest 4.1.8 → [Updates: 4.1.9]
• vitest-axe 1.0.0-pre.5
• @tailwindcss/oxide-linux-x64-gnu 4.2.2 → [Updates: 4.3.0]
• @xmldom/xmldom 0.8.13 → [Updates: 0.9.10]
• axios 1.16.0 → [Updates: 1.18.0]
• brace-expansion 5.0.6 → [Updates: 5.0.7]
• defu 6.1.6 → [Updates: 6.1.7]
• esbuild 0.28.1
• fast-uri 3.1.2 → [Updates: 3.1.4]
• follow-redirects 1.16.0
• form-data 4.0.6
• hono 4.12.25 → [Updates: 4.12.27]
• immutable 3.8.3 → [Updates: 4.3.9]
• ip-address 10.1.1 → [Updates: 10.2.0]
• kysely 0.28.17 → [Updates: 0.29.2]
• lodash 4.18.1
• lodash-es 4.18.1
• magic-string 0.30.21 → [Updates: 1.0.0]
• qs 6.15.2 → [Updates: 6.15.3]
• react-is 19.2.5 → [Updates: 19.2.7]
• tmp 0.2.7
• undici 7.28.0 → [Updates: 8.1.0]
• uuid 14.0.0 → [Updates: 14.0.1]
• vite 8.0.16 → [Updates: 8.1.5]
• ws 8.21.0 → [Updates: 8.21.1]

packages/e2e/package.json (1)

• @playwright/test 1.58.2 → [Updates: 1.60.0]

packages/shared/package.json (3)

• postgres 3.4.7 → [Updates: 3.4.9]
• zod 4.3.6 → [Updates: 4.4.3]
• @types/bun 1.3.11 → [Updates: 1.3.14]

packages/ui/package.json (40)

• @fontsource/inter 5.2.8 → [Updates: 5.3.0]
• @radix-ui/react-dialog 1.1.15 → [Updates: 1.1.17]
• @radix-ui/react-dropdown-menu 2.1.16 → [Updates: 2.1.18]
• @radix-ui/react-popover 1.1.15 → [Updates: 1.1.17]
• @radix-ui/react-separator 1.1.8 → [Updates: 1.1.10]
• @radix-ui/react-slot 1.2.4 → [Updates: 1.2.5]
• @radix-ui/react-tabs 1.1.13 → [Updates: 1.1.15]
• @tanstack/react-router 1.168.10 → [Updates: 1.170.7]
• class-variance-authority 0.7.1
• clsx 2.1.1
• dompurify 3.4.11 → [Updates: 3.4.12]
• framer-motion 12.38.0 → [Updates: 12.40.0, 12.38.0]
• i18next 26.0.4 → [Updates: 26.2.0]
• i18next-icu 2.4.3 → [Updates: 2.4.4]
• jsdom 29.0.2 → [Updates: 29.1.1]
• katex 0.16.33 → [Updates: 0.17.0]
• lucide-react 1.8.0 → [Updates: 1.16.0]
• mermaid 11.15.0 → [Updates: 11.16.0]
• micromark 4.0.2
• micromark-core-commonmark 2.0.3
• micromark-util-classify-character 2.0.1
• micromark-util-types 2.0.2
• react-i18next 17.0.2 → [Updates: 17.0.8]
• react-markdown 10.1.0
• rehype-katex 7.0.1
• rehype-raw 7.0.0
• rehype-sanitize 6.0.0
• remark-gfm 4.0.1
• remark-math 6.0.0
• shiki 3.2.0 → [Updates: 3.23.0, 4.0.2]
• tailwind-merge 3.5.0 → [Updates: 3.6.0]
• unist-util-visit 5.1.0
• vaul 1.1.2
• @types/hast 3.0.4 → [Updates: 3.0.5]
• vite-plugin-pwa 1.3.0
• vitest 4.1.8 → [Updates: 4.1.9]
• react * → [Updates: 19.2.8]
• react-dom * → [Updates: 19.2.8]
• vite * → [Updates: 8.1.5]
• vite-plugin-pwa * → [Updates: 1.3.0]

services/controller/package.json (3)

• @types/bun ^1.1.0 → [Updates: 1.3.14]
• @types/node ^22.0.0 → [Updates: 22.20.1, ^25.0.0]
• typescript ^5.6.0 → [Updates: 5.9.3, ^6.0.0]

services/convex/package.json

services/db/package.json

services/docs/package.json (5)

• framer-motion 12.38.0 → [Updates: 12.40.0, 12.38.0]
• minisearch 7.2.0
• vite-plugin-pwa 1.3.0
• @playwright/test 1.58.2 → [Updates: 1.60.0]
• @types/bun 1.3.11 → [Updates: 1.3.14]

services/platform/package.json (159)

• @better-auth/api-key 1.6.23 → [Updates: 1.6.24]
• @better-auth/passkey 1.6.23 → [Updates: 1.6.24]
• @casl/ability 6.8.0 → [Updates: 6.8.1, 7.0.1]
• @dnd-kit/core 6.3.1
• @dnd-kit/sortable 10.0.0
• @dnd-kit/utilities 3.2.2
• @hookform/resolvers 5.2.2 → [Updates: 5.4.0]
• @iconify-json/lucide ^1.2.116 → [Updates: 1.2.118]
• @iconify/react 6 → [Updates: 6.0.2]
• @measured/puck ^0.20.2 → [Updates: 0.20.2]
• @microlink/react-json-view 1.31.18 → [Updates: 1.31.20]
• @milkdown/crepe 7.20.0 → [Updates: 7.21.1]
• @milkdown/kit 7.20.0 → [Updates: 7.21.1]
• @milkdown/react 7.20.0 → [Updates: 7.21.1]
• @modelcontextprotocol/sdk 1.29.0
• @noble/curves 1.9.7 → [Updates: 2.2.0]
• @node-saml/node-saml 5.1.0
• @novnc/novnc ^1.7.0 → [Updates: 1.7.0]
• @radix-ui/react-checkbox 1.3.3 → [Updates: 1.3.5]
• @radix-ui/react-dialog 1.1.15 → [Updates: 1.1.17]
• @radix-ui/react-label 2.1.8 → [Updates: 2.1.10]
• @radix-ui/react-popover 1.1.15 → [Updates: 1.1.17]
• @radix-ui/react-radio-group 1.3.8 → [Updates: 1.4.4]
• @radix-ui/react-select 2.2.6 → [Updates: 2.3.4]
• @radix-ui/react-slot 1.2.4 → [Updates: 1.2.5]
• @radix-ui/react-switch 1.2.6 → [Updates: 1.3.4]
• @radix-ui/react-toast 1.2.15 → [Updates: 1.2.17]
• @radix-ui/react-tooltip 1.2.8 → [Updates: 1.2.10]
• @radix-ui/react-visually-hidden 1.2.4 → [Updates: 1.2.6]
• @scure/base 2.0.0 → [Updates: 2.2.0]
• @sentry/tanstackstart-react 10.48.0 → [Updates: 10.53.1]
• @tailwindcss/postcss 4.2.2 → [Updates: 4.3.0]
• @tanstack/react-query 5.97.0 → [Updates: 5.100.14]
• @tanstack/react-router 1.168.10 → [Updates: 1.170.7]
• @tanstack/react-table 8.21.3
• @tanstack/react-virtual 3.13.26 → [Updates: 3.14.8]
• @xyflow/react 12.10.2 → [Updates: 12.11.2]
• aws4fetch ^1.0.20 → [Updates: 1.0.20]
• bcryptjs 3.0.3
• better-auth 1.6.23 → [Updates: 1.6.24]
• chokidar 5.0.0
• class-variance-authority 0.7.1
• clsx 2.1.1
• cron-parser 5.5.0 → [Updates: 5.6.2]
• date-fns 4.1.0 → [Updates: 4.3.0]
• dayjs 1.11.20 → [Updates: 1.11.21]
• diff ^9.0.0 → [Updates: 9.0.0]
• dompurify 3.4.11 → [Updates: 3.4.12]
• elkjs 0.11.1 → [Updates: 0.12.0]
• fast-xml-parser 5.8.0 → [Updates: 5.10.1]
• framer-motion 12.38.0 → [Updates: 12.40.0, 12.38.0]
• hast-util-to-html 9.0.5
• he 1.2.0
• hono 4.12.25 → [Updates: 4.12.27]
• i18next 26.0.4 → [Updates: 26.2.0]
• imapflow 1.4.3 → [Updates: 1.4.9]
• jexl 2.3.0
• jose 6.2.2 → [Updates: 6.2.3]
• jsdom 29.0.2 → [Updates: 29.1.1]
• json-diff-kit 1.0.35
• jszip 3.10.1
• libphonenumber-js 1.12.42 → [Updates: 1.13.3]
• linkedom 0.18.13
• lodash 4.18.1
• lucide-react 1.8.0 → [Updates: 1.16.0]
• mailparser 3.9.12 → [Updates: 3.9.14]
• mammoth 1.12.0
• mdast-util-from-markdown 2.0.3
• mdast-util-gfm 3.1.0
• mdast-util-to-hast 13.2.1
• mermaid 11.15.0 → [Updates: 11.16.0]
• micromark-extension-gfm 3.0.0
• mssql 12.2.1 → [Updates: 12.5.4]
• mustache 4.2.0
• mysql2 3.21.1 → [Updates: 3.22.3]
• nodemailer 9.0.3
• openai 6.42.0 → [Updates: 6.48.0]
• parse5 8.0.0 → [Updates: 8.0.1]
• pdfjs-dist 5.5.207 → [Updates: 5.7.284, 6.1.200]
• pg 8.20.0 → [Updates: 8.21.0]
• postgres 3.4.7 → [Updates: 3.4.9]
• prom-client 15.1.3
• proxy-addr 2.0.7
• qrcode.react 4.2.0
• react-datepicker 9.1.0
• react-day-picker 9.14.0 → [Updates: 10.0.1]
• react-file-icon 1.6.0
• react-hook-form 7.72.1 → [Updates: 7.76.1]
• react-i18next 17.0.2 → [Updates: 17.0.8]
• react-markdown 10.1.0
• recharts 3.7.0 → [Updates: 3.8.1]
• rehype-katex 7.0.1
• rehype-raw 7.0.0
• rehype-sanitize 6.0.0
• remark-gfm 4.0.1
• remark-math 6.0.0
• safe-regex2 5.1.1
• striptags 3.2.0
• sucrase 3.35.1
• swagger-ui-react 5.32.2 → [Updates: 5.32.7]
• tailwind-merge 3.5.0 → [Updates: 3.6.0]
• tailwindcss 4.2.2 → [Updates: 4.3.0]
• turndown 7.2.0 → [Updates: 7.2.4]
• typescript 6.0.2 → [Updates: 6.0.3, 7.0.2]
• undici 7.28.0 → [Updates: 8.1.0]
• validator 13.15.35
• vite 8.0.16 → [Updates: 8.1.5]
• vite-plugin-pwa 1.3.0
• workbox-window 7.4.1
• yaml 2.8.3 → [Updates: 2.9.0]
• zod 4.3.6 → [Updates: 4.4.3]
• @playwright/test 1.58.2 → [Updates: 1.60.0]
• @stoplight/prism-core 5.15.11 → [Updates: 5.16.0]
• @stoplight/prism-http 5.15.11 → [Updates: 5.16.0]
• @stoplight/types 14.1.1
• @tanstack/router-plugin 1.167.12 → [Updates: 1.168.10]
• @testing-library/dom 10.4.1
• @testing-library/jest-dom 6.9.1 → [Updates: 7.0.0]
• @testing-library/react 16.3.2
• @testing-library/user-event 14.6.1
• @types/bun 1.3.11 → [Updates: 1.3.14]
• @types/he 1.2.3
• @types/jexl 2.3.4
• @types/jsdom 21.1.7 → [Updates: 28.0.1]
• @types/lodash 4.17.24
• @types/mailparser 3.4.6
• @types/mssql 9.1.11 → [Updates: 12.3.0]
• @types/mustache 4.2.6
• @types/nodemailer 8.0.1
• @types/pg 8.20.0
• @types/proxy-addr 2.0.3
• @types/react 19.2.14 → [Updates: 19.2.17]
• @types/react-dom 19.2.3
• @types/react-file-icon 1.0.5
• @types/seedrandom 3.0.8
• @types/swagger-ui-react 5.18.0
• @types/turndown 5.0.6
• @types/validator 13.15.10
• @types/ws ^8.18.1 → [Updates: 8.18.1]
• @vite-pwa/assets-generator 1.0.2
• @vitejs/plugin-react 6.0.1 → [Updates: 6.0.2]
• @vitest/browser 4.1.8 → [Updates: 4.1.10]
• @vitest/browser-playwright 4.1.8 → [Updates: 4.1.9]
• postcss-load-config 6.0.1
• seedrandom 3.0.5
• sharp 0.33.5 → [Updates: 0.35.0]
• tree-kill 1.2.2
• vitest-axe 1.0.0-pre.5
• @parcel/watcher-linux-arm64-glibc 2.5.6 → [Updates: 2.6.0]
• @parcel/watcher-linux-x64-glibc 2.5.6 → [Updates: 2.6.0]
• @rollup/rollup-linux-arm64-gnu 4.60.1 → [Updates: 4.60.4]
• @rollup/rollup-linux-x64-gnu 4.60.1 → [Updates: 4.60.4]
• @swc/core-linux-arm64-gnu 1.15.24 → [Updates: 1.15.43]
• @swc/core-linux-x64-gnu 1.15.24 → [Updates: 1.15.43]
• @tailwindcss/oxide-linux-arm64-gnu 4.2.2 → [Updates: 4.3.0]
• @tailwindcss/oxide-linux-x64-gnu 4.2.2 → [Updates: 4.3.0]
• lightningcss-linux-arm64-gnu 1.32.0 → [Updates: 1.33.0]
• lightningcss-linux-x64-gnu 1.32.0 → [Updates: 1.33.0]
• react-is 19.2.5 → [Updates: 19.2.7]

services/proxy/package.json

services/sandbox-buildkitd/package.json

services/sandbox-egress/package.json

services/sandbox-llm-gateway/package.json

services/sandbox-runtime/daemon/package.json (3)

• @types/bun ^1.1.0 → [Updates: 1.3.14]
• @types/node ^22.0.0 → [Updates: 22.20.1, ^25.0.0]
• typescript ^5.6.0 → [Updates: 5.9.3, ^6.0.0]

services/sandbox-runtime/daemon/package.json (3)

• @types/bun ^1.1.0 → [Updates: 1.3.14]
• @types/node ^22.0.0 → [Updates: 22.20.1, ^25.0.0]
• typescript ^5.6.0 → [Updates: 5.9.3, ^6.0.0]

services/sandbox-runtime/package.json

services/sandbox/package.json (4)

• @kubernetes/client-node ^1.4.0 → [Updates: 1.4.0]
• @types/bun ^1.1.0 → [Updates: 1.3.14]
• typescript ^5.6.0 → [Updates: 5.9.3, ^6.0.0]
• form-data 4.0.6

services/sandbox/package.json (4)

• @kubernetes/client-node ^1.4.0 → [Updates: 1.4.0]
• @types/bun ^1.1.0 → [Updates: 1.3.14]
• typescript ^5.6.0 → [Updates: 5.9.3, ^6.0.0]
• form-data 4.0.6

services/web/package.json (7)

• class-variance-authority 0.7.1
• framer-motion 12.38.0 → [Updates: 12.40.0, 12.38.0]
• react-markdown 10.1.0
• remark-gfm 4.0.1
• @playwright/test 1.58.2 → [Updates: 1.60.0]
• @types/bun 1.3.11 → [Updates: 1.3.14]
• sharp 0.34.2 → [Updates: 0.35.0]

tools/cli/package.json (7)

• @inquirer/prompts 8.4.1 → [Updates: 8.4.3]
• @noble/curves 1.9.7 → [Updates: 2.2.0]
• @scure/base 2.0.0 → [Updates: 2.2.0]
• commander 14.0.3 → [Updates: 15.0.0]
• yaml 2.8.3 → [Updates: 2.9.0]
• @types/bun 1.3.11 → [Updates: 1.3.14]
• typescript 6.0.2 → [Updates: 6.0.3, 7.0.2]

tools/opengrep/package.json

tools/plop/package.json (3)

• plop 4.0.1 → [Updates: 4.0.5]
• @types/bun 1.3.11 → [Updates: 1.3.14]
• typescript 6.0.2 → [Updates: 6.0.3, 7.0.2]

tools/skills/package.json (3)

• yaml 2.8.3 → [Updates: 2.9.0]
• @types/bun 1.3.11 → [Updates: 1.3.14]
• typescript 6.0.2 → [Updates: 6.0.3, 7.0.2]

docker-compose (9)

compose.dev.yml

compose.docs.test.yml

compose.docs.yml

compose.sandbox-llm-gateway.dev.yml

compose.test.mock.yml

compose.test.yml

compose.web.test.yml

compose.web.yml

compose.yml (1)

• brainicism/bgutil-ytdlp-pot-provider 1.3.1

dockerfile (14)

services/controller/Dockerfile (1)

• oven/bun 1.3.12-debian → [Updates: 1.3.14-debian]

services/convex/Dockerfile (1)

• docker/dockerfile 1.22 → [Updates: 1.24]

services/db/Dockerfile (2)

• paradedb/paradedb 0.22.6-pg16 → [Updates: 0.23.4-pg16]
• ghcr.io/amacneil/dbmate 2

services/docs/Dockerfile (2)

• oven/bun 1.3.12 → [Updates: 1.3.14]
• oven/bun 1.3.12-slim → [Updates: 1.3.14-slim]

services/platform/Dockerfile (2)

• docker/dockerfile 1.7 → [Updates: 1.24]
• oven/bun 1.3.12 → [Updates: 1.3.14]

services/proxy/Dockerfile (1)

• caddy 2.11-alpine

services/sandbox-buildkitd/Dockerfile

services/sandbox-egress/Dockerfile (1)

• alpine 3.20 → [Updates: 3.21]

services/sandbox-llm-gateway/Dockerfile (1)

• maximhq/bifrost v1.5.13 → [Updates: v1.5.16, 2.1.29]

services/sandbox-runtime/Dockerfile (4)

• oven/bun 1
• python 3.12-slim-bookworm → [Updates: 3.14-slim-bookworm]
• ghcr.io/astral-sh/uv 0.5 → [Updates: 0.11]
• node 24-bookworm-slim → [Updates: 24.18.0-bookworm-slim]

services/sandbox/Dockerfile (3)

• docker 27-cli → [Updates: 28-cli]
• oven/bun 1.3.12-debian → [Updates: 1.3.14-debian]
• oven/bun 1.3.12-debian → [Updates: 1.3.14-debian]

services/web/Dockerfile (2)

• oven/bun 1.3.12 → [Updates: 1.3.14]
• oven/bun 1.3.12-slim → [Updates: 1.3.14-slim]

tools/plop/templates/service/docker/Dockerfile.hbs

tools/plop/templates/service/react/Dockerfile.hbs (2)

• oven/bun 1.3.12 → [Updates: 1.3.14]
• oven/bun 1.3.12-slim → [Updates: 1.3.14-slim]

github-actions (15)

.github/actions/setup-turbo/action.yml (3)

• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6, v5]
• felixmosh/turborepo-gh-artifacts v4@118f869397261f74bc39cb8565f2d02c0ed4209f → [Updates: v4.1.1]

.github/workflows/build.yml (33)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• dorny/paths-filter v4@fbd0ab8f3e69293af611ebaee6363fc25e6d187d → [Updates: v4.0.2, v4]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.2.0]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.4.0]
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.3.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.4.0]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• docker/login-action v4.1.0@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.4.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4.35.3@e46ed2cbd01164d986452f91f178727624ae40d7 → [Updates: v4.37.0]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.1]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• bun 1.3.12 → [Updates: 1.3.14]
• bun 1.3.12 → [Updates: 1.3.14]
• bun 1.3.12 → [Updates: 1.3.14]
• bun 1.3.12 → [Updates: 1.3.14]
• bun 1.3.12 → [Updates: 1.3.14]
• bun 1.3.12 → [Updates: 1.3.14]

.github/workflows/cleanup-pr-images.yml

.github/workflows/cli.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6.1.0]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.1]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c → [Updates: v8.0.1]
• bun 1.3.13 → [Updates: 1.3.14]

.github/workflows/commitlint.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]

.github/workflows/e2e.yml (11)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6, v5]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.1]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6, v5]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6, v5]
• actions/download-artifact v8@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c → [Updates: v8.0.1]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.1]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6, v5]
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.1]

.github/workflows/issue-labeler.yml (1)

• actions/github-script v9.0.0@3a2844b7e9c422d3c10d287c895573f7108da1b3

.github/workflows/lint.yml (5)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• astral-sh/setup-uv v6@d0cc045d04ccac9d8b7881df0226f9e82c39688e → [Updates: v6.8.0, v8.3.2]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]

.github/workflows/migrations-e2e.yml (2)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• docker/login-action v3@74a5d142397b4f367a81961eba4e8cd7edddf772 → [Updates: v3.7.0, v4, v3]

.github/workflows/release.yml (10)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• docker/setup-buildx-action v4.0.0@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd → [Updates: v4.2.0]
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.4.0, v4]
• docker/build-push-action v7.1.0@bcafcacb16a39f128d818304e6c9c0c18556b85f → [Updates: v7.3.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.4.0, v4]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• docker/login-action v4@4907a6ddec9925e35a0a9e82d7399ccc52663121 → [Updates: v4.4.0, v4]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• bun 1.3.12 → [Updates: 1.3.14]

.github/workflows/sast.yml (3)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6, v5]
• github/codeql-action v4.35.3@e46ed2cbd01164d986452f91f178727624ae40d7 → [Updates: v4.37.0]

.github/workflows/scorecard.yml (4)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a → [Updates: v7.0.1]
• github/codeql-action v4.35.3@e46ed2cbd01164d986452f91f178727624ae40d7 → [Updates: v4.37.0]

.github/workflows/security.yml (7)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• oven-sh/setup-bun v2@0c5077e51419868618aeaa5fe8019c62421857d6 → [Updates: v2.2.0]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• github/codeql-action v4@e46ed2cbd01164d986452f91f178727624ae40d7 → [Updates: v4.37.3, v4]
• aquasecurity/trivy-action v0.36.0@ed142fd0673e97e23eac54620cfb913e5ce36c25
• bun 1.3.12 → [Updates: 1.3.14]

.github/workflows/test.yml (6)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]
• actions/cache v5@27d5ce7f107fe9357f9df03efb73ab90386fccae → [Updates: v5.1.0, v6, v5]
• brainicism/bgutil-ytdlp-pot-provider 1.3.1

.github/workflows/update-models.yml (1)

• actions/checkout v6@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.1.0, v7, v6]

npm (2)

.agents/skills/visual-aspect-analyzer/package.json (5)

• pngjs ^7.0.0 → [Updates: 7.0.0]
• @types/bun 1.3.11 → [Updates: 1.3.14]
• @types/pngjs ^6.0.5 → [Updates: 6.0.5]
• happy-dom ^20.10.6 → [Updates: 20.11.1]
• typescript 6.0.2 → [Updates: 6.0.3, 7.0.2]

.claude/skills/visual-aspect-analyzer/package.json (5)

• pngjs ^7.0.0 → [Updates: 7.0.0]
• @types/bun 1.3.11 → [Updates: 1.3.14]
• @types/pngjs ^6.0.5 → [Updates: 6.0.5]
• happy-dom ^20.10.6 → [Updates: 20.11.1]
• typescript 6.0.2 → [Updates: 6.0.3, 7.0.2]

---

• Check this box to trigger a request for Renovate to run again on this repository